Silent wrong-service communication when IP_COOLDOWN_PERIOD < nf_conntrack_tcp_timeout_syn_sent causes stale conntrack DNAT to route SYN to recycled pod IP
March 28, 2026 · #3634
Go
Difficulty: Easy
Labels
question needs investigation
Parent Repository
aws/amazon-vpc-cni-k8s
Go repository
2,429 811